Start of new case 


Q1 


Does the draft guidance cover the relevant issues about the right of access? 
© Yes 
©) No 

©) Unsure / don't know 

If no or unsure/don’t know, what other issues would you like to be covered in it? 


Q2 


Does the draft guidance contain the right level of detail? 


© Yes 
©) No 

©) Unsure / don't know 

If no or unsure/don't know, in what areas should there be more detail within the draft 
guidance? 


Q3 


Does the draft guidance contain enough examples? 
-) Yes 


© No 


©) Unsure / don't know 
If no or unsure/don’t know, please provide any examples that think should be included in 
the draft guidance. 


there should be more guidance on sectors facing complex and difficult SARS such as education and 
medical. 


Q4 We have found that data protection professionals often struggle with applying and 
defining ‘manifestly 


unfounded or excessive’ subject access requests. We would like to include a wide 
range of examples 

from a variety of sectors to help you. Please provide some examples of manifestly 
unfounded and excessive 

requests below (if applicable). 


Q5 Ona scale of 1-5 how useful is the draft guidance? 


1-Notatall 2-—Slightly Moderately 4-Very 5- Extremely 
useful useful useful useful useful 


Q6 Why have you given this score? 


The guidance still does not take into account the fact that the most complex SARS 
usually derive from litigation or contemplated litigation either between the responder 
to the SAR and the data subject or the responder as a third party. The process is 
being used as a way to obtain disclosure in proceedings. Whilst this has advantages 
it adds a huge burden to the process for the responder because of the complexity of 
managing third party data in responding to a SAR. 


Q7 To what extent do you agree that the draft guidance is clear and easy to understand? 


Strongly Neither agree Strongly 
disagree Disagree nor disagree Agree agree 


| i D l ) © 
— — b — 


Q8 


Please provide any further comments or suggestions you may have about the draft 
guidance. 


The guidance is simply a review of the law - it does not give any new or helpful 
examples. Third party data continues to be a problem and the guidance is limited in 
this respect, instead taking the approach of discretion of the responder. 


Q9 Are you answering as: 


ey An individual acting in a private capacity (eg someone providing their views as a 
— member of the public) 


© An individual acting in a professional capacity 
©) On behalf of an organisation 

©) Other 

Please specify the name of your organisation: 


Q10 How did you find out about this survey? 
_) ICO Twitter account 
©) ICO Facebook account 
©) ICO LinkedIn account 
©) ICO website 
©) ICO newsletter 
©) ICO staff member 
|) Colleague 
©) Personal/work Twitter account 
`) Personal/work Facebook account 
@ Personal/work LinkedIn account 
__) Other 


Thank you for taking the time to complete the survey 


